[danjac]

This is a great idea...unfortunately a company that skips on Django security patches and bug fixes will very likely be doing the same for everything else (frontend libraries, servers, etc). But there's not much you can do when you're stuck on a feature-factory treadmill, and this looks like a cost-effective way to ameliorate the problem.

[codestasis]

Yes, that's why I optimistically chose a generic name for the project. Django is a solid start and I sure have tons more work to do.

Then there's an opportunity to expand to adjacent projects it could make sense to cover.

There's lots of thinking to do, approaches to try around funding the original projects and authors, and happily aligning incentives.